Flamingo Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Flamingo Project records in CISA KEV

No Flamingo Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2020-17919 CVE-2020-35245 · GHSA-37cg-6ww4-3f68

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89

TI-2020-17918 CVE-2020-35244 · GHSA-mp76-8wmf-mx7x

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89

TI-2020-17917 CVE-2020-35243 · GHSA-fwm5-6cq3-ch4p

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89

TI-2020-17916 CVE-2020-35242 · GHSA-q6w2-7x26-wjhf

MEDIUM 44

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2020-12-26 No fix listed CWE-89